Delegates & permissions

Least privilege. Viewing an itinerary does not grant passport, payment-card or identity-scan access. Sensitive permissions are granted separately.